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DETAILED ACTION 

1. This action is in response to remarks filed on May 23, 2007. Claims 1 - 22 
are pending. 

Response to Arguments 

2. Applicant's arguments filed on May 23, 2007 have been fully considered. 
Applicant's arguments with respect to Double patenting rejection of 

amended Claims 1 - 22 over US Patent 6,360,262 are not persuasive and 
Examiner hereby maintains the Double patenting rejection. 

Applicant argues that instant application recites "a routing program 
executed by said processor, said routing program being connected to receive a 
user name, a user password, and a domain name associated with the user and 
to route requests for authorization according to said domain name" which are not 
recited in Patent 6,360,262. Examiner respectfully points out that the patent 
recites, "receiving an incoming client (user) request for access to a specified 
server resource object (domain) at a router (router program) having an 
associated port space identifying a plurality of ports, wherein each incoming 
client request is issued form a client machine having a web browser, and wherein 
incoming client requests are targeted to the router by priming a web page to be 
displayed on the web browser to include at least one anchor which references 
the router, a port number in the port space, and a given server resource object 
(requested & authorized domain name)". 

Instant application is claiming a router connected to receive authorization 
quarries and routes to a domain (specified by the user). User's credentials are 
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authenticated as well as internally utilized, the user's domain name to locate (or 
map to) a specific registry adapter and dynamically routes the request to that 
registry adapter. The information is passed using an interface entry-mapping 
table. (See specification paragraph [0019 - 0026]). Also, the router maintains 
one to one mapping between each supported domain and its associated registry 
through each individual registry configuration in the server applications. 

Patent claims a router that accepts authorization information sent by the 
client and directs (or redirects) to a server. Patent specification discloses the 
router capable of routing and redirecting client requests to the most appropriate 
server by using the mapping table (a resource table with a row for each server 
object). The router, a port number in the port space and given server resource 
object defines a domain name. Thus patent claims anticipates instant claims 
wherein maintaining a mapping table with a list of servers serving the server 
resource objects and authorizing the client encompass router routing according 
to a domain name, is equivalent to the instant application. Therefore, the 
rejection was reasonable. 

Furthermore, Applicant should read the claim as a whole but not just a 
part of the recitation, in particular, not just one limitation of the claim. Claims of 
the instant application are anticipated by patent claims in that the patent claims 
contains all the limitations of the instant application. Claims of the instant 
application therefore is not patentably distinct from the earlier patent claims and 
as such are unpatentable for obvious-type double patenting (In re Goodman 
(CAFC) 29 USPQ2d 2010 (12/3/1993). 
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3. With respect to amended Claims 1 - 22, applicant primarily argues that 
Guo et al. (U.S. Patent 6,912,582) does not anticipate "a routing program 
executed by said processor, said routing program being connected to receive a 
user name, a user password, and a domain name associated with the user and 
to route requests for authorization according to said domain name" (see remarks 
page 6 - page 9). This argument is not persuasive. 

Examiner now points out that the admitted prior art Guo, in fact, discloses, 
"a multi-site user authentication system provides a federated environment 
(heterogeneous) in which locations of web servers are centrally looked up 
(preexisting authorization using user's information" and further provides 
automatic routing to a particular page at the web service site (routing to a 
particular to a registry) (See Guo Summary and Column 4 line 25 - Column 10 
line 55). 

Therefore, the examiner respectfully asserts that the cited prior art does 
teach or suggest the subject matter broadly recited in amended and new 
independent claims. The dependent claims are rejected at least by virtue of their 
dependency on the dependent claims. Accordingly, the rejection for the pending 
claims is respectfully maintained. 

Examiner suggests amending the claims with the subject matter that is 
disclosed in paragraph [0025 - 0033] to distinguish the instant application claims 
with the admitted prior art. 
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Double Patenting 

The nonstatutory double patenting rejection is based on a judicially 
created doctrine grounded in public policy (a policy reflected in the statute) so as 
to prevent the unjustified or improper timewise extension of the "right to exclude" 
granted by a patent and to prevent possible harassment by multiple assignees. 
A nonstatutory obviousness-type double patenting rejection is appropriate where 
the conflicting claims are not identical, but at least one examined application 
claim is not patentably distinct from the reference claim(s) because the examined 
application claim is either anticipated by, or would have been obvious over, the 
reference claim(s). See, e.g., In re Berg, 140 F.3d 1428, 46 USPQ2d 1226 (Fed. 
Cir. 1998); In re Goodman, 11 F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); In 
re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re Van Ornum, 686 
F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 USPQ 
619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 USPQ 644 (CCPA 
1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1 .321(c) or 
1 .321(d) may be used to overcome an actual or provisional rejection based on a 
nonstatutory double patenting ground provided the conflicting application or 
patent either is shown to be commonly owned with this application, or claims an 
invention made as a result of activities undertaken within the scope of a joint 
research agreement. 

Effective January 1 , 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully 
comply with 37 CFR 3.73(b). 



4. Claims 1 - 22 are rejected on the ground of nonstatutory obviousness- 
type double patenting as being unpatentable over claims 1 - 43 of U.S. Patent 
No. 6,360,262. Although the conflicting claims are not identical, they are not 
patentably distinct from each other because the instant case, all elements of 
claims 1 - 22 correspond to the claims of 1 - 43 of the patent claims, except in 
the instant claims the element "heterogeneous registries", is referred in the 
patent claims as "list of servers". 

It would have been obvious to one having ordinary skill in the art to 
recognize that "heterogeneous registries containing heterogeneous access 
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protocols that are associated with domain names" is equivalent to "a list of 
servers, each with a port number associated with a server resource object". 

Claim Rejections - 35 USC §112 

4. Claims 10 - 12 are rejected under 35 U.S.C. 112, second paragraph, as 
being indefinite for failing to particularly point out and distinctly claim the subject 
matter which applicant regards as the invention. 

Claim 10 recites, "a domain name of a user". Examiner is not clear with 
what the applicant is trying to claim. However, Examiner suggests amending the 
claim to recite, "a domain name associated with the said user", as the applicant 
has done with other independent claims. 

Claim Rejections - 35 USC § 102 

The text of those sections of Title 35, U.S. Code not included in this action 
can be found in a prior Office action. 

5. Claims 1-15 and 17-22 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Guo et al. (U.S. Patent 6,912,582). 

6. As per Claim 1 , Guo teaches, "A computer system, comprising: an output 
device for providing information to a user; an input device for receiving requests 
from the user; a processor connected to said input device and to said output 
device to process requests and provide information; and a routing program 
executed by said processor, said routing program being connected to receive a 
user name, a user password, and a domain name associated with the user and 
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to route requests for authorization according to said domain name" (Figure 1 item 
#100 - 112; Figure 4; Summary; Column 4 lines 25 - 63 and Column 8 line 55 - 
Column 10 line 32). Guo teaches a multi site user authentication system that 
provides automatic routing to a particular web site. The user provides confidential 
(authentication) information to the authentication server, which validates the user 
and directs to the appropriate service by retrieving the appropriate location 
information from the authentication database to identify the location of the server 
providing the selected service (that is, location information of a selected web 
service for a given user based on user's domain). 

7. As per Claim 6, Guo teaches, "A method for providing secure system 
access, said method comprising the steps of: receiving, from a user, a user 
name, password, and a domain name; using said domain name to determine an 
access protocol and an access registry that is associated with said domain 
name; routing access queries from said user to said access registry using said 
access protocol; and authenticating said user using said access registry" (Figure 
1 item #1 00 - 1 1 2; Figure 4; Summary; Column 4 lines 25 - 63 and Column 8 
line 55 - Column 10 line 32). Guo teaches a multi site user authentication system 
that provides automatic routing to a particular web site. The user provides 
confidential (authentication) information to the authentication server, which 
validates the user and directs to the appropriate service by retrieving the 
appropriate location information from the authentication database to identify the 
location of the server providing the selected service (that is, location information 
of a selected web service for a given user based on user's domain). 
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8. As per Claim 10, Guo teaches, "A computer program product on a 
computer readable medium, said computer program product comprising: a login 
routine for receiving a user identification, a password, and a domain name of a 
user; and a router routine that receives authorization queries and routes said 
authorization queries to an authentication registry according to said domain 
name wherein said user is authenticated using said authentication registry" 
(Figure 1 item #1 00 - 1 1 2; Figure 4; Summary; Column 4 lines 25 - 63 and 
Column 8 line 55 - Column 10 line 32). Guo teaches a multi site user 
authentication system that provides automatic routing to a particular web site. 
The user provides confidential (authentication) information to the authentication 
server, which validates the user and directs to the appropriate service by 
retrieving the appropriate location information from the authentication database 
to identify the location of the server providing the selected service (that is, 
location information of a selected web service for a given user based on user's 
domain). 

9. As per Claim 13, Guo teaches, "A computer system, comprising: an output 
device for providing information to a user; an input device for receiving requests 
from the user; a processor that is connected to said input device and to said 
output device to process requests and provide information; a plurality of 
heterogeneous registries, each of said registries being associated with a 
corresponding access protocol; and a routing program, executing on said 
processor to route authorization requests to a corresponding one of said plurality 
of heterogeneous registries to authenticate said user, wherein said routing 
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program routes said authorization requests according to a domain name 
associated with said user" (Figure 1 item #100 - 1 12; Figure 4; Summary; 
Column 4 lines 25 - 63 and Column 8 line 55 - Column 10 line 32). Guo teaches 
a multi site user authentication system that provides automatic routing to a 
particular web site. The user provides confidential (authentication) information to 
the authentication server, which validates the user and directs to the appropriate 
service by retrieving the appropriate location information from the authentication 
database to identify the location of the server providing the selected service (that 
is, location information of a selected web service for a given user based on user's 
domain). 

10. As per Claim 17, Guo teaches, "A method for providing secure system 
access, said method comprising the steps of: providing a plurality of 
heterogeneous authentication registries, said plurality of registries being 
accessed by a corresponding plurality of access protocols; routing authorization 
queries to a corresponding one of said plurality of access protocols which 
accesses a corresponding one of said plurality of authentication registries to 
authenticate a user to access a resource of a system" (Figure 1 item #100 - 1 12; 
Figure 4; Summary; Column 4 lines 25 - 63 and Column 8 line 55 - Column 10 
line 32). Guo teaches a multi site user authentication system that provides 
automatic routing to a particular web site. The user provides confidential 
(authentication) information to the authentication server, which validates the user 
and directs to the appropriate service by retrieving the appropriate location 
information from the authentication database to identify the location of the server 
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providing the selected service (that is, location information of a selected web 
service for a given user based on user's domain). 

11. As per Claim 21, Guo teaches, "A computer program product on a 
computer readable medium, said computer program product comprising: a router 
connected to receive authorization queries and to route said authorization 
queries to one of a plurality of heterogeneous authentication registries through an 
associated heterogeneous access method, wherein a user is authenticated using 
said one of the plurality of heterogeneous authentication registries" (Figure 1 item 
#100 - 112; Figure 4; Summary; Column 4 lines 25-63 and Column 8 line 55 - 
Column 10 line 32). Guo teaches a multi site user authentication system that 
provides automatic routing to a particular web site. The user provides confidential 
(authentication) information to the authentication server, which validates the user 
and directs to the appropriate service by retrieving the appropriate location 
information from the authentication database to identify the location of the server 
providing the selected service (that is, location information of a selected web 
service for a given user based on user's domain). 

12. As per Claim 2, Guo teaches, "wherein said processor is a server" 
(Column 8 lines 6- 16). 

13. As per Claim 3, Guo teaches, "wherein said input device is a keyboard" 
(Column 6 lines 58-67). 

14. As per Claim 4, Guo teaches, "wherein said routing program routes 
requests to one of a plurality of heterogeneous registries used to authenticate 
users of the computer system" (Column 4 lines 25 - 41). 
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15. As per Claim 7, Guo teaches, "The method of claim 6, further comprising 
the step of determining if said access protocol that is associated with said 
domain name is in memory" (Column 4 lines 25-41). 

16. As per Claim 9, Guo teaches, "The method of claim 6, wherein said using 
step determines an access protocol from a plurality of heterogeneous access 
protocols" (Column 9 line 45 - Column 10 line 27). 

17. As per Claim 1 1 , Guo teaches, "The computer program product of claim 
10, further comprising a plurality of heterogeneous authentication registries and a 
corresponding plurality of heterogeneous access methods to which said router 
routine routes said queries" (Column 9 line 45 - Column 10 line 27). 

18. As per Claim 12, Guo teaches, "The computer program product of claim 
10, wherein said router routine determines if an access method corresponding to 
said domain name is already in memory" (Column 9 line 45 - Column 10 line 27). 

19. As per Claim 14, Guo teaches, "The computer system of claim 13, 
wherein said processor is a server" (Column 8 lines 6 - 16). 

20. As per Claim 15, Guo teach, "The computer system of claim 13, wherein 
said plurality of heterogeneous registries are each used for user authentication" 
(Column 6 lines 58 - 67). 

21. As per Claim 18, Guo teaches, "The method of claim 17, further 
comprising the step of determining if said corresponding one of said plurality of 
access protocols is in memory" (Column 9 line 45 - Column 10 line 27). 
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22. As per Claim 20, Guo teaches, "The method of claim 17, wherein said 
routing step routes said authorization query according to a domain name 
specified by said user" (Column 9 line 45 - Column 10 line 2). 

23. As per Claim 22, Guo teaches, "The computer program product of claim 
21 , wherein said router routes said authorization queries according to a domain 
name received from said user" (Column 9 line 45 - Column 10 line 2). 

24. As per Claim 5, Guo teaches, "The computer system of claim 4, wherein 
said plurality of heterogeneous registries are accessed by a corresponding 
plurality of heterogeneous access protocols" (Column 9 line 45 - Column 10 line 
27). 

25. As per Claim 8, Guo teaches, "The method of claim 7, further comprising 
the step of loading said access protocol that is associated with said domain 
name if said access protocol is not in said memory" (Column 9 line 45 - Column 
10 line 27). 

26. As per Claim 19, Guo teaches, "The method of claim 18, further 
comprising the step of loading said corresponding one of said plurality of access 
protocols" (Column 9 line 45 - Column 1 0 line 27). 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply is 
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filed within TWO MONTHS of the mailing date of this final action and the advisory 
action is not mailed until after the end of the THREE-MONTH shortened statutory 
period, then the shortened statutory period will expire on the date the advisory 
action is mailed, and any extension fee pursuant to 37 CFR 1 .136(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will 
the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Pramila Parthasarathy whose telephone 
number is 571-272-3866. The examiner can normally be reached on 8:00a.m. 
To 5:00p.m.. If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Nasser Moazzami can be reached on 571-232-4195. 
Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 
703-305-3900. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR only. For more information about the PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Pramila Parthasarathy 
July 16, 2006. 
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